f6bbd67647341d03028c6bc19cca00d84f1146146afe75d7e7fea873dba9bdb4[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

f6bbd67647341d03028c6bc19cca00d84f1146146afe75d7e7fea873dba9bdb4.exe
Size

209KB
MD5

0674012dabdb0275fee903639ea1a519
SHA1

d84b992a933d9609aa893a9f88c9054afc41a7a1
SHA256

f6bbd67647341d03028c6bc19cca00d84f1146146afe75d7e7fea873dba9bdb4
SHA512

44d13002a80d70b5b32fe6cbcacbabc416b76afe788cf21517d8046ef739d41294a6335575409194248379228e3afe9b61afc9b26718d74b5e9bfa11fbf069db
SSDEEP

3072:zXT2OLjm4L55orO4h/nQGoQoIcdJel0gUlRk7Bf8VNWk:ryOLK4/JizGcl0gGRsBkD

Score

N/A

Malware Config

Signatures

Files

f6bbd67647341d03028c6bc19cca00d84f1146146afe75d7e7fea873dba9bdb4.exe
.exe windows x86

Password: infected

d03478a6c3c407f77f1436449d58c5a8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleAliasesLengthW
GetConsoleAliasExesA
LoadResource
VerSetConditionMask
InterlockedDecrement
WaitNamedPipeA
SetFirmwareEnvironmentVariableA
GetSystemDefaultLCID
GetGeoInfoW
GlobalAlloc
SetFileShortNameW
GetConsoleAliasW
GetFileAttributesW
WriteConsoleW
lstrlenW
RaiseException
LCMapStringA
OpenMutexW
SetLastError
GetProcAddress
FindVolumeMountPointClose
VirtualAlloc
IsValidCodePage
SetComputerNameA
LoadLibraryA
LocalAlloc
AddAtomA
FoldStringA
GetModuleHandleA
CreateMutexA
FreeEnvironmentStringsW
FindNextFileW
GetFileAttributesExW
TerminateJobObject
LCMapStringW
GetStartupInfoW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetLastError
SetFilePointer
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
HeapFree
CloseHandle
GetModuleHandleW
Sleep
ExitProcess
WriteFile
GetModuleFileNameA
GetModuleFileNameW
GetEnvironmentStringsW
GetCommandLineW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
SetStdHandle
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
HeapReAlloc
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
FlushFileBuffers
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
WriteConsoleA
GetConsoleOutputCP
HeapSize
CreateFileA

Sections

.text
Size: 67KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 103KB - Virtual size: 4.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: infected

d03478a6c3c407f77f1436449d58c5a8

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 67KB - Virtual size: 66KB

.data Size: 103KB - Virtual size: 4.1MB

.rsrc Size: 23KB - Virtual size: 22KB

.reloc Size: 15KB - Virtual size: 14KB

.text
Size: 67KB - Virtual size: 66KB

.data
Size: 103KB - Virtual size: 4.1MB

.rsrc
Size: 23KB - Virtual size: 22KB

.reloc
Size: 15KB - Virtual size: 14KB